perfSONAR User Q&A and Other Discussion

[Roberto Carna <>]

Dear Mark, is there any way to put perfSONAR behind my corporate firewall, using NAT for going to Internet???

Because as you can see, I have the private IP from my perfSONAR box in the web interface, but after that the firewall apply source NATing to go to Internet, and destination NATing for traffic coming from Internet.

Thanks again!!!

El mar., 11 sept. 2018 a las 14:37, Mark Feit (<>) escribió:

Roberto Carna writes:

 

I have a corporate firewall with incoming ports (TCP/861, TCP/862) and outgoing ports (several recommended).

But I still have no luck in put to work my tests, I send my results as attached file.

 

Please what can be the problem now ?

 

Testing forward RTT and loss don’t require cooperation from the remote host other than being able to reach it, which is why you’re getting measurements.  The 100% loss figure you’re seeing may be caused by a firewall (yours, ESNet’s or something in the middle).  Testing those in the reverse direction and testing throughput in either direction requires the other end’s cooperation.  As I said earlier, kans-owamp.es.net and sacr-pt1.es.net are configured to deny testing to hosts not on one of ESNet’s lists of approved blocks.  (The lists of those blocks are available at http://stats.es.net/sample_configs/pscheduler.)  If you’re not on one of those lists, those hosts will not allow testing and nothing can be changed on your end to make it happen.

 

The source IP shown in the image you posted is on a private block defined in RFC 1918.  If your system is providing that IP to the other end (of which nettest.lbl.gov is the only one not configured to block testing), the address is by definition unroutable and will not work on the public Internet.  Testing from behind a NAT or PAT firewall is supported only in certain cases, and this is not one of them.  If most of your testing is to hosts out on the Internet, we recommend putting perfSONAR nodes on routable addresses.

 

--Mark